$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/af1b3aef-2699-30a3-a772-17f88062186f.roa File: af1b3aef-2699-30a3-a772-17f88062186f.roa (raw, json) Hash identifier: ETRG/SX5XLg7OZFiltdXvPsVwnm2XEKbC7aB5VdkTJw= Subject key identifier: 63:99:01:98:3E:97:BD:B5:E6:7A:5E:FC:D4:1E:14:90:05:6A:B3:63 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584BA0EA1BAB349AD66F4B6C1280 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/af1b3aef-2699-30a3-a772-17f88062186f.roa Signing time: Fri 24 Oct 2025 13:48:44 +0000 ROA not before: Fri 24 Oct 2025 13:48:44 +0000 ROA not after: Thu 22 Jan 2026 14:48:44 +0000 asID: 3561 IP address blocks: 206.100.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:ea:1b:ab:34:9a:d6:6f:4b:6c:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Oct 24 13:48:44 2025 GMT Not After : Jan 22 14:48:44 2026 GMT Subject: CN=df7924ad-0345-47f3-a45c-f484972d9d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5c:f4:74:f5:4a:45:5c:8d:44:db:18:e5:21: 9a:ad:d6:c3:82:e3:f3:0e:83:01:1a:62:fd:74:36: 61:55:82:3f:ea:67:52:0b:98:b2:77:06:37:84:0d: 3a:57:26:16:c5:79:12:20:bd:c6:42:97:c2:8f:87: 21:1c:dd:26:a3:d9:43:8c:72:f0:f7:6f:40:81:d2: b6:86:2e:53:74:82:e2:13:75:7f:f9:58:18:59:30: f0:d8:e1:f7:e7:ef:bb:bf:9a:85:c2:2d:71:2d:eb: b3:89:3b:df:52:29:53:70:c9:98:cf:5d:d0:29:0c: 36:59:6d:48:5e:c1:9c:7a:32:2e:68:5c:f8:67:ad: 66:3a:63:2f:9d:42:1f:b4:9a:50:76:28:30:64:5d: 37:5c:92:58:bc:b7:51:9a:2c:5f:8a:d8:d2:c8:14: 32:74:89:77:7f:8f:fd:f1:08:a8:cb:3e:65:70:19: 89:7e:cb:e8:96:24:ab:19:31:cc:d6:18:dd:5f:c8: bd:4e:a7:27:21:a0:4f:c6:b7:f1:78:a7:25:76:4f: 33:46:46:d0:5b:72:14:22:43:aa:ba:a4:05:40:f5: 42:f6:81:51:da:dc:c5:6a:7d:4c:db:1a:bc:42:84: ee:35:9a:c0:95:27:0e:f2:00:27:83:af:69:7b:95: 58:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:99:01:98:3E:97:BD:B5:E6:7A:5E:FC:D4:1E:14:90:05:6A:B3:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/af1b3aef-2699-30a3-a772-17f88062186f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 206.100.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:58:7e:95:43:92:2d:e8:dd:a3:86:6d:02:6b:99:75:4c:2f: 2c:d0:f1:2d:9c:92:ed:b4:14:52:b0:62:bd:58:ff:cc:69:1e: b4:40:56:d1:f2:c4:91:b1:4f:a4:94:c6:7e:dc:91:b6:e0:d8: a4:9e:07:ac:ab:65:49:f9:66:cc:6a:3f:3c:47:1d:78:59:fd: 1d:dd:8f:97:02:a6:47:cf:66:4d:cf:50:6a:c0:c3:13:ea:38: 52:a8:37:ab:c2:e4:61:f3:a3:d2:cb:d9:41:c2:52:45:9c:3f: 5f:06:65:7f:95:85:2c:90:57:5b:94:9e:40:3d:84:c0:9d:cc: 86:17:00:96:87:c3:8d:eb:20:94:65:3b:28:91:93:50:9f:a3: 96:c3:6c:b9:51:b2:bd:30:70:9d:cb:ad:6d:6d:4a:ad:80:d5: ae:ab:df:78:eb:e2:d3:1b:fe:9b:c0:f6:5d:00:a4:0d:d6:2a: e8:ac:df:ec:7c:1d:c3:42:3b:39:45:e4:ad:e0:4d:92:bb:23: 07:b7:68:29:13:77:ce:20:37:ab:1e:0f:6c:84:12:49:bd:7c: da:69:d8:3e:3f:66:19:ca:c8:83:6a:a9:c3:14:2d:59:8c:93: 76:7a:cc:62:45:15:54:ea:81:7c:6a:1c:58:e8:a8:ac:96:31: 6f:00:64:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug6hurNJrWb0tsEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MTAyNDEzNDg0NFoXDTI2MDEyMjE0NDg0NFowLzEtMCsGA1UEAxMk ZGY3OTI0YWQtMDM0NS00N2YzLWE0NWMtZjQ4NDk3MmQ5ZDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1z0dPVKRVyNRNsY5SGardbDguPzDoMBGmL9 dDZhVYI/6mdSC5iydwY3hA06VyYWxXkSIL3GQpfCj4chHN0mo9lDjHLw929AgdK2 hi5TdILiE3V/+VgYWTDw2OH35++7v5qFwi1xLeuziTvfUilTcMmYz13QKQw2WW1I XsGcejIuaFz4Z61mOmMvnUIftJpQdigwZF03XJJYvLdRmixfitjSyBQydIl3f4/9 8Qioyz5lcBmJfsvoliSrGTHM1hjdX8i9TqcnIaBPxrfxeKcldk8zRkbQW3IUIkOq uqQFQPVC9oFR2tzFan1M2xq8QoTuNZrAlScO8gAng69pe5VYwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOZAZg+l7215npe/NQeFJAFarNjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYWYxYjNhZWYtMjY5OS0z MGEzLWE3NzItMTdmODgwNjIxODZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzmQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNYfpVDki3o3aOGbQJrmXVMLyzQ8S2cku20FFKwYr1Y/8xpHrRAVtHy xJGxT6SUxn7ckbbg2KSeB6yrZUn5ZsxqPzxHHXhZ/R3dj5cCpkfPZk3PUGrAwxPq OFKoN6vC5GHzo9LL2UHCUkWcP18GZX+VhSyQV1uUnkA9hMCdzIYXAJaHw43rIJRl OyiRk1Cfo5bDbLlRsr0wcJ3LrW1tSq2A1a6r33jr4tMb/pvA9l0ApA3WKuis3+x8 HcNCOzlF5K3gTZK7Iwe3aCkTd84gN6seD2yEEkm9fNpp2D4/ZhnKyINqqcMULVmM k3Z6zGJFFVTqgXxqHFjoqKyWMW8AZDw= -----END CERTIFICATE-----Generated at Tue Nov 4 21:46:26 2025 by rpki-client